| |
|
RSS Feed - WebSphere MQ Support
|
RSS Feed - Message Broker Support
|
  |
|
| RACF RESLEVEL |
« View previous topic :: View next topic » |
| Author |
Message
|
| OmarLittle |
 Posted: Wed Mar 24, 2010 2:10 am Post subject: RACF RESLEVEL |
 |
|
Newbie
Joined: 24 Mar 2010
Posts: 5
|
Hi,
Could somebody confirm if my understanding for RESLEVEL is correct.
A user id can attain access to the RESLEVEL profile via:
- UACC (which is checked first)
- Access List (which is checked after UACC)
So, if you gain access via the UACC then no further checking is done.
If the hlq.RESLEVEL profile is set up with a UACC of ALTER then this means the access list is never checked
Cheers |
|
| Back to top |
|
 |
| Vitor |
| Posted: Wed Mar 24, 2010 5:38 am Post subject: Re: RACF RESLEVEL |
|
|
Grand High Poobah
Joined: 11 Nov 2005
Posts: 26093
Location: Texas, USA
|
| OmarLittle wrote: |
| Could somebody confirm if my understanding for RESLEVEL is correct. |
I think it isn't
| OmarLittle wrote: |
A user id can attain access to the RESLEVEL profile via:
- UACC (which is checked first)
- Access List (which is checked after UACC)
So, if you gain access via the UACC then no further checking is done. |
This is a RACF question not an WMQ one & you have it backwards. RACF will scan the access list for the user id to see if there is a specific access level assigned. It will then check the Universal ACCess to see what access is granted to some bloke who's just wandered up.
| OmarLittle wrote: |
| If the hlq.RESLEVEL profile is set up with a UACC of ALTER then this means the access list is never checked |
No. It means that security checking in your queue manager is effectively disabled and it had better be a dev system you don't care much about. The only more effective way of opening up a z/OS queue manager to abuse is to define switch profiles.
_________________
Honesty is the best policy.
Insanity is the best defence. |
|
| Back to top |
|
|
| bruce2359 |
| Posted: Wed Mar 24, 2010 12:01 pm Post subject: |
|
|
Poobah
Joined: 05 Jan 2008
Posts: 9469
Location: US: west coast, almost. Otherwise, enroute.
|
RESLEVEL answers the question: how many userids (0,1,2) will be checked?
_________________
I like deadlines. I like to wave as they pass by.
ב''ה
Lex Orandi, Lex Credendi, Lex Vivendi. As we Worship, So we Believe, So we Live. |
|
| Back to top |
|
|
|
|
|
| |
|
Page 1 of 1 |
|
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
